Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2397791e-acab-301c-9289-ae5d17c50dc2.roa
File:                     2397791e-acab-301c-9289-ae5d17c50dc2.roa (raw, json)
Hash identifier:          1borX9ym8mddan/3Z81l4nJIi0KeQmz8PjlG4tRIT2A=
Subject key identifier:   E4:FE:1E:30:39:ED:31:56:FB:06:A8:15:21:6E:A9:71:CA:E9:E6:70
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C575A43FAEFB95ED8C467B80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2397791e-acab-301c-9289-ae5d17c50dc2.roa
Signing time:             Tue 04 Feb 2025 13:38:10 +0000
ROA not before:           Tue 04 Feb 2025 13:38:10 +0000
ROA not after:            Mon 05 May 2025 12:38:10 +0000
asID:                     30036
IP address blocks:        150.195.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:75:a4:3f:ae:fb:95:ed:8c:46:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 13:38:10 2025 GMT
            Not After : May  5 12:38:10 2025 GMT
        Subject: CN=542ad4c9-0879-4189-a1d5-c67cdfd5d087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:69:56:8d:b9:df:b6:fd:45:90:6f:70:26:53:
                    80:c5:d1:38:89:83:61:ad:ae:0a:11:67:54:51:b2:
                    29:18:5d:35:0d:2b:5b:ec:87:9c:1c:d3:b8:31:ee:
                    55:f3:e4:c7:45:43:cc:26:e8:26:1c:c5:8e:0a:c9:
                    39:31:85:f2:6b:eb:da:d9:06:20:65:06:e8:3f:84:
                    ae:0c:23:f0:b7:8c:35:7b:aa:e1:c8:d2:f5:e6:8c:
                    f3:1c:c0:e1:f8:9b:e1:a9:4d:11:69:d1:1d:dc:4d:
                    1f:a6:fc:94:f1:52:e8:c3:66:8a:ee:a5:4f:82:21:
                    fc:7c:8d:4f:b0:80:ff:74:0c:c2:10:b1:7f:31:08:
                    2f:cc:ae:85:3a:b7:97:66:58:05:b6:51:78:37:00:
                    82:1b:ff:c6:33:b8:3e:62:2b:07:2d:16:31:33:69:
                    cb:a0:a8:d5:16:fb:f4:b1:79:a9:46:cc:27:c5:0d:
                    0a:fd:a7:46:41:c4:d3:ee:08:b9:48:0b:46:c3:e6:
                    fe:a2:23:6f:2e:fd:62:84:1e:a8:88:d1:83:af:aa:
                    cd:7d:20:ef:f7:90:ee:74:8a:41:ee:7b:7b:0c:b3:
                    0e:dd:d3:8b:c8:71:a2:1f:5d:15:d8:26:4e:a0:33:
                    b2:0b:83:57:f1:19:41:11:95:c1:68:fe:7e:e1:b7:
                    c6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FE:1E:30:39:ED:31:56:FB:06:A8:15:21:6E:A9:71:CA:E9:E6:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2397791e-acab-301c-9289-ae5d17c50dc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:cd:b5:41:fd:e5:03:80:2a:c1:2a:19:30:0e:a4:ef:cd:75:
         73:18:21:80:98:5a:15:2d:b6:0d:c0:48:b9:2e:40:d9:ec:7f:
         0f:00:bb:8e:5c:e2:2a:3f:8f:a5:ca:6f:3c:e5:85:fe:04:42:
         48:98:38:3a:3e:5e:9f:d6:38:25:60:85:e3:0d:d2:59:d2:91:
         c8:c9:e2:9d:da:06:c6:3c:ae:74:dc:a2:51:75:4a:eb:3e:35:
         34:b9:34:d5:02:d9:e5:8e:04:5e:67:14:1a:a2:bf:3e:f9:98:
         13:bf:52:51:46:27:78:0a:58:df:c7:6e:79:41:92:2f:57:7a:
         71:72:36:2f:32:a0:9c:27:1b:0a:60:42:91:db:82:9d:b9:09:
         2f:6c:c7:22:81:60:dc:fc:22:f2:53:bc:ab:a1:39:9b:cc:07:
         08:92:72:68:79:d5:45:d2:f2:40:01:63:8b:a3:10:87:02:9b:
         ab:e5:fc:b8:10:b8:0c:6f:dd:90:82:57:4f:fd:5f:da:c0:cc:
         4b:5c:b3:42:23:da:93:4b:e1:33:68:40:cb:c2:5c:e0:5c:7c:
         a7:33:f8:19:9c:af:ef:6f:92:d2:77:34:54:50:fe:b3:43:0f:
         12:70:5b:ef:06:66:85:b0:e7:3a:e2:4f:e0:2b:d6:7c:71:fe:
         96:13:af:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFdaQ/rvuV7YxGe4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDEzMzgxMFoXDTI1MDUwNTEyMzgxMFowLzEtMCsGA1UEAxMk
NTQyYWQ0YzktMDg3OS00MTg5LWExZDUtYzY3Y2RmZDVkMDg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmlWjbnftv1FkG9wJlOAxdE4iYNhra4KEWdU
UbIpGF01DStb7IecHNO4Me5V8+THRUPMJugmHMWOCsk5MYXya+va2QYgZQboP4Su
DCPwt4w1e6rhyNL15ozzHMDh+JvhqU0RadEd3E0fpvyU8VLow2aK7qVPgiH8fI1P
sID/dAzCELF/MQgvzK6FOreXZlgFtlF4NwCCG//GM7g+YisHLRYxM2nLoKjVFvv0
sXmpRswnxQ0K/adGQcTT7gi5SAtGw+b+oiNvLv1ihB6oiNGDr6rNfSDv95DudIpB
7nt7DLMO3dOLyHGiH10V2CZOoDOyC4NX8RlBEZXBaP5+4bfGPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOT+HjA57TFW+waoFSFuqXHK6eZwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjM5Nzc5MWUtYWNhYi0z
MDFjLTkyODktYWU1ZDE3YzUwZGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClsMMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAADNtUH95QOAKsEqGTAOpO/NdXMYIYCYWhUttg3ASLkuQNnsfw8Au45c
4io/j6XKbzzlhf4EQkiYODo+Xp/WOCVgheMN0lnSkcjJ4p3aBsY8rnTcolF1Sus+
NTS5NNUC2eWOBF5nFBqivz75mBO/UlFGJ3gKWN/HbnlBki9XenFyNi8yoJwnGwpg
QpHbgp25CS9sxyKBYNz8IvJTvKuhOZvMBwiScmh51UXS8kABY4ujEIcCm6vl/LgQ
uAxv3ZCCV0/9X9rAzEtcs0Ij2pNL4TNoQMvCXOBcfKcz+Bmcr+9vktJ3NFRQ/rND
DxJwW+8GZoWw5zriT+Ar1nxx/pYTr38=
-----END CERTIFICATE-----
Generated at Wed Apr 9 05:17:09 2025 by rpki-client